coggrit Inc. - Legal Document

1. Introduction

Welcome to coggrit. We are committed to protecting your privacy and handling your data in an open and transparent manner. This Privacy Policy details how coggrit Inc. ("we," "us," or "our") collects, uses, processes, and safeguards your information when you use our mobile and web application (the "Service"). Our core promise is "Privacy First." This policy is designed to be compliant with major global privacy standards, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). The data controller for your information is: coggrit Inc. [Your Company Address] [Your Company Email, e.g., privacy@coggrit.com]

2. Information We Collect

We collect information that is essential for providing and improving our Service. The categories of information below align with those defined under the CCPA.

Information You Provide Directly (Identifiers, Personal Records):

• Account Information: When you register, we collect basic identifiers like your email address and name.
• Your Content: We collect and store the notes, journal entries, voice memos, photos, and other content you create within the Cognition Stack and Grit Journal. This is the core data the Service operates on and may be considered personal records.

Information Collected Automatically (Inferences, Usage Data):

• AI-Generated Data: Our Synapse AI processes Your Content to generate insights and inferences. This includes sentiment analysis, entity recognition (people, projects), and patterns related to your well-being and productivity. This processing occurs on a secure infrastructure, and the raw insights are considered part of your personal data.
• Usage Data: We may collect anonymous data about your interaction with the Service (e.g., feature usage, session duration) to help us improve our product. This data is aggregated and does not identify you personally.

3. Lawful Basis for Processing (GDPR)

We process your personal data based on the following legal grounds:

• Performance of a Contract: We process your data to provide the coggrit services you signed up for.
• Consent: For specific features, we may ask for your explicit consent, which you can withdraw at any time.
• Legitimate Interests: We process anonymous usage data to understand how our Service is used and to improve it.

4. How We Use Your Information

We use the information we collect for the following purposes:

• To provide, operate, and maintain the Service.
• To power the Synapse AI and provide you with personal insights.
• To communicate with you about your account or support requests.
• To improve the application by analyzing anonymized usage trends.
• Crucially, we will NEVER sell your personal data or share it for cross-context behavioral advertising.

5. Data Sharing and Third-Party Services (Sub-processors)

We do not share your personal data with third parties, except as necessary to provide our Service. Our primary sub-processor is:

• Google Firebase (Google Cloud): We use Google Firebase for our core infrastructure, including secure database hosting (Firestore) and authentication. Your data is stored within this secure environment.
• Google AI: We use googleapis API to power the Synapse AI features. Your content is sent to OpenAI's servers for processing, but we do not share your personal identifiers with them.

We ensure that all third-party service providers comply with strict data protection standards and only process data as necessary to provide their services to us.

6. Data Security

We implement robust security measures to protect your data, including encryption in transit (TLS) and at rest. Access to your data is restricted to authorized personnel only. We regularly review our security practices to ensure the highest level of protection.

• End-to-End Encryption: All Your Content is encrypted in transit and at rest.
• Access Controls: Strict access controls are in place to prevent unauthorized access to our systems.

7. Your Data Protection Rights

You have rights regarding your personal data. We have outlined them below based on GDPR and CCPA.

• Access: You can request a copy of the personal data we hold about you.
• Correction: You can request corrections to any inaccurate or incomplete data.
• Deletion: You can request the deletion of your personal data, subject to certain exceptions (e.g., legal obligations).
• Data Portability: You can request your data in a structured, commonly used format.
• Opt-Out of Sale: Although we do not sell your data, you have the right to opt-out of any future sales if that changes.
• Withdraw Consent: If we process your data based on consent, you can withdraw it at any time.
• The Right to Know: You have the right to request information about the categories and specific pieces of personal information we have collected about you.
• The Right to Delete: You have the right to request the deletion of your personal information.
• The Right to Opt-Out of Sale/Sharing: We do not sell or share your personal information. Therefore, there is no need to opt-out.
• The Right to Correct: You have the right to request the correction of inaccurate personal information.
• The Right to No Retaliation: We will not discriminate against you for exercising any of your CCPA rights.
To exercise any of these rights, please contact us at [privacy@coggrit.com]. We will verify your request using the email address associated with your account.

8. Data Retention

We retain your personal data for as long as your account is active. If you delete your account, all your personal data and content will be permanently deleted from our systems within 30 days.

9. International Data Transfers

Your personal data may be transferred to and processed in countries outside of your own, including the United States. We take appropriate measures to ensure that any such transfers comply with applicable data protection laws and that your personal data receives an adequate level of protection.

10. Children's Privacy

Our Service is not intended for individuals under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have inadvertently collected such data, we will take steps to delete it as soon as possible.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the "Last updated" date at the top. We encourage you to review this policy periodically to stay informed about how we are protecting your information.

12. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at: coggrit Inc.

Terms of Service

Effective Date: October 20, 2025

1. Agreement to Terms

By creating an account and using the coggrit Service, you agree to be bound by these Terms of Service ("Terms").

2. Your Account

You must be at least 16 years old (or the applicable age in your jurisdiction) to use coggrit. You are responsible for safeguarding your account password and for all activities that occur under your account.

3. Subscriptions

• Free Service: coggrit offers a free version with limited features.
• Pro Service: We offer a paid subscription ("coggrit Pro") that unlocks advanced features. Fees are billed on a monthly or annual basis.
• Payment: All payments are handled by third-party payment processors (e.g., Apple App Store, Google Play Store, Stripe).
• Cancellation: You can cancel your Pro subscription at any time. Your subscription will remain active until the end of the current billing period.

4. Your Content and Intellectual Property

5. Termination

You are free to stop using our Service at any time. We reserve the right to suspend or terminate your account if you are in breach of these Terms.

6. Limitation of Liability

The Service is provided "as is." To the fullest extent permitted by law, coggrit Inc. shall not be liable for any indirect, incidental, special, consequential, or punitive damages, or any loss of profits or revenues, whether incurred directly or indirectly, resulting from your use of the Service.

7. Changes to Terms

We may modify these Terms from time to time. We will notify you of any changes by posting the new Terms on our website and in the app. Your continued use of the Service after the changes become effective constitutes your acceptance of the new Terms.

8. Governing Law

These Terms shall be governed by and construed in accordance with the laws of the State of California, without regard to its conflict of law principles.

9. Contact Us

If you have any questions about these Terms, please contact us at: